MAL-2025-89175 Malicious code in okta-lodeh24-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50be676821a60f3bc9aeec130ff91dd18b07a7065c9995d9c4ced7fbe944cfee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-84162 Malicious code in classical_perch_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e01dce2fd7ba9dcce6e8273fe34fcbdb62d084b1839911487c759eea23a33607 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-92670 Malicious code in young_sparrow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df90f25ba587e5dc6b00f89dcf6c039e241ae2b2a218a9a32bf18a7e363f53be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-92732 Malicious code in yuni-rangginang74-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7bcef1bab39fbf02171dd4f9307d1d70bd3cbbb474911733ece0032c0d9cae7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-91810 Malicious code in vida-lapis26-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e578a6540f5ce090c37e5cb79d69f33ac3925fcf18679ab8bf66efc7105922ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-92937 Malicious code in zaki-tongseng26-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ca8573f7e2d0702362a6590f83b73966dea8fb564c3910bd8cb51c8dbd3843c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-87117 Malicious code in joko-menjes87-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2508c25cd2975c472f9122d3f5ed7a8390df57b1cff1eecaa15cb29265a9ce43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-67057

Malicious code in rina-rawon1-riris npm...

MAL-2025-83290 Malicious code in arif-lontong7-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 612448ea21d2eac4c601a03e3ac098e058cd8dedce1f799b9abaeff2bf399962 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitri-nasipecel29-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29f4303d187cc5052ad8903d1a53ea55174572347cfe18cc1d867906fcaec8c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ridiculous_guanaco_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8699b2631e614d8a01b8f4678c6ade61cec9fa1590039e942c3d67dd9ab4f704 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nadia-otak-otak34-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae9b25ce1b2f1668c888a202c966f050bca9127afd317be44311fb8bd7ab1ab8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yuni-klipo93-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45f318c61bf864233b5b2ea3521a91b44ec05813f96e795684ee408890a273eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-ruwet85-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63930f1bc52c5dd267735da3b2bc98390ba2e32eecee52a32f51b1e734845c70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rudi-lengko10-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c8965848c1fdf6902e3f880e3958405ea8d6705bd5ac1bf133251e3553b3c3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wibowo-lontong6-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d7c320526cc2be1caeafe36f44bbb18c33c895234d4c6187ae1bf5fb6a7e3bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nana-keraktelor27-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa79bc9432f315146b900f77a9a694800be974321689247970026548e6c858cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in civic_anaconda_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c7aba3d97de2cb4a73d26005d6bb6f205ea6a2cc640e9851aeaabc39bdce490 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-jamblang60-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d62ca711330466ce0a753532717d4f1e0bc5d4b48b8bf79e0a34edfecb1fe78f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nana-martabak75-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5afa565cdbcd48d158c984640ae95ad0f6871ee7899024f4d77fec998438713e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...